2024-04-18T11:04:39.872193+03:00 pfSense.home.arpa snort[31784] [1:1000002:1] Detected XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:52440 -> 10.20.10.224:80
2024-04-18T11:04:55.883962+03:00 pfSense.home.arpa snort[31784] [1:1000002:1] Detected XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:37486 -> 10.20.10.224:80
2024-04-18T11:12:41.474565+03:00 pfSense.home.arpa snort[31784] Snort Reload: Any change to any output configurations requires a restart.
2024-04-18T11:12:43.271390+03:00 pfSense.home.arpa snort[31784] Shutting down Legacy Blocking Mode custom output plugin, 'alert_pf'.
2024-04-18T11:12:57.583928+03:00 pfSense.home.arpa snort[31784] [1:1000002:1] Blocked XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:46850 -> 10.20.10.224:80
2024-04-18T11:13:45.085134+03:00 pfSense.home.arpa snort[31784] [1:1000002:1] Blocked XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:58370 -> 10.20.10.224:80
2024-04-18T11:13:48.152927+03:00 pfSense.home.arpa snort[31784] [1:1000002:1] Blocked XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:58370 -> 10.20.10.224:80
2024-04-18T11:16:28.395304+03:00 pfSense.home.arpa snort[31784] *** Caught Term-Signal
2024-04-18T11:16:29.490863+03:00 pfSense.home.arpa snort[59971] Initializing 'alert_pf' custom output module for Legacy Mode Blocking.
2024-04-18T11:16:29.491246+03:00 pfSense.home.arpa snort[59971] Populating the internal list of firewall interface IP addresses for auto-whitelisting.
2024-04-18T11:16:29.491403+03:00 pfSense.home.arpa snort[59971] Added firewall interface le0 IPv6 address fe80::a00:27ff:fe30:9340 to automatic interface IP Pass List.
2024-04-18T11:16:29.491562+03:00 pfSense.home.arpa snort[59971] Added firewall interface le0 IPv4 address 10.20.10.224 to automatic interface IP Pass List.
2024-04-18T11:16:29.491673+03:00 pfSense.home.arpa snort[59971] Added firewall interface le1 IPv6 address fe80::a00:27ff:fe62:9b7c to automatic interface IP Pass List.
2024-04-18T11:16:29.491750+03:00 pfSense.home.arpa snort[59971] Added firewall interface le1 IPv4 address 192.168.45.1 to automatic interface IP Pass List.
2024-04-18T11:16:29.491933+03:00 pfSense.home.arpa snort[59971] Added firewall interface lo0 IPv6 address ::1 to automatic interface IP Pass List.
2024-04-18T11:16:29.492029+03:00 pfSense.home.arpa snort[59971] Added firewall interface lo0 IPv6 address fe80::1 to automatic interface IP Pass List.
2024-04-18T11:16:29.492132+03:00 pfSense.home.arpa snort[59971] Added firewall interface lo0 IPv4 address 127.0.0.1 to automatic interface IP Pass List.
2024-04-18T11:16:29.527895+03:00 pfSense.home.arpa snort[59971] Firewall interface IP address change notification monitoring thread started for Legacy Blocking Mode.
2024-04-18T11:16:34.438226+03:00 pfSense.home.arpa snort[59971] Restarting Legacy Blocking Mode custom output plugin: received 'snort reload config' signal.
2024-04-18T11:16:34.438496+03:00 pfSense.home.arpa snort[59971] Populating the internal list of firewall interface IP addresses for auto-whitelisting.
2024-04-18T11:16:34.438605+03:00 pfSense.home.arpa snort[59971] Added firewall interface le0 IPv6 address fe80::a00:27ff:fe30:9340 to automatic interface IP Pass List.
2024-04-18T11:16:34.438718+03:00 pfSense.home.arpa snort[59971] Added firewall interface le0 IPv4 address 10.20.10.224 to automatic interface IP Pass List.
2024-04-18T11:16:34.438904+03:00 pfSense.home.arpa snort[59971] Added firewall interface le1 IPv6 address fe80::a00:27ff:fe62:9b7c to automatic interface IP Pass List.
2024-04-18T11:16:34.439004+03:00 pfSense.home.arpa snort[59971] Added firewall interface le1 IPv4 address 192.168.45.1 to automatic interface IP Pass List.
2024-04-18T11:16:34.439176+03:00 pfSense.home.arpa snort[59971] Added firewall interface lo0 IPv6 address ::1 to automatic interface IP Pass List.
2024-04-18T11:16:34.439272+03:00 pfSense.home.arpa snort[59971] Added firewall interface lo0 IPv6 address fe80::1 to automatic interface IP Pass List.
2024-04-18T11:16:34.439369+03:00 pfSense.home.arpa snort[59971] Added firewall interface lo0 IPv4 address 127.0.0.1 to automatic interface IP Pass List.
2024-04-18T11:16:38.503539+03:00 pfSense.home.arpa snort[59971] [1:1000002:1] Blocked XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:37522 -> 10.20.10.224:80
2024-04-18T11:16:53.063123+03:00 pfSense.home.arpa snort[12449] Initializing 'alert_pf' custom output module for Legacy Mode Blocking.
2024-04-18T11:16:53.063316+03:00 pfSense.home.arpa snort[12449] Populating the internal list of firewall interface IP addresses for auto-whitelisting.
2024-04-18T11:16:53.063340+03:00 pfSense.home.arpa snort[12449] Added firewall interface le0 IPv6 address fe80::a00:27ff:fe30:9340 to automatic interface IP Pass List.
2024-04-18T11:16:53.063356+03:00 pfSense.home.arpa snort[12449] Added firewall interface le0 IPv4 address 10.20.10.224 to automatic interface IP Pass List.
2024-04-18T11:16:53.063370+03:00 pfSense.home.arpa snort[12449] Added firewall interface le1 IPv6 address fe80::a00:27ff:fe62:9b7c to automatic interface IP Pass List.
2024-04-18T11:16:53.063383+03:00 pfSense.home.arpa snort[12449] Added firewall interface le1 IPv4 address 192.168.45.1 to automatic interface IP Pass List.
2024-04-18T11:16:53.063395+03:00 pfSense.home.arpa snort[12449] Added firewall interface lo0 IPv6 address ::1 to automatic interface IP Pass List.
2024-04-18T11:16:53.063408+03:00 pfSense.home.arpa snort[12449] Added firewall interface lo0 IPv6 address fe80::1 to automatic interface IP Pass List.
2024-04-18T11:16:53.063421+03:00 pfSense.home.arpa snort[12449] Added firewall interface lo0 IPv4 address 127.0.0.1 to automatic interface IP Pass List.
2024-04-18T11:16:53.089422+03:00 pfSense.home.arpa snort[12449] Firewall interface IP address change notification monitoring thread started for Legacy Blocking Mode.
2024-04-18T11:16:53.090624+03:00 pfSense.home.arpa snort[12449] Shutting down Legacy Blocking Mode custom output plugin, 'alert_pf'.
2024-04-18T11:16:54.108618+03:00 pfSense.home.arpa snort[59971] Restarting Legacy Blocking Mode custom output plugin: received 'snort reload config' signal.
2024-04-18T11:16:54.108768+03:00 pfSense.home.arpa snort[59971] Populating the internal list of firewall interface IP addresses for auto-whitelisting.
2024-04-18T11:16:54.108789+03:00 pfSense.home.arpa snort[59971] Added firewall interface le0 IPv6 address fe80::a00:27ff:fe30:9340 to automatic interface IP Pass List.
2024-04-18T11:16:54.108805+03:00 pfSense.home.arpa snort[59971] Added firewall interface le0 IPv4 address 10.20.10.224 to automatic interface IP Pass List.
2024-04-18T11:16:54.108819+03:00 pfSense.home.arpa snort[59971] Added firewall interface le1 IPv6 address fe80::a00:27ff:fe62:9b7c to automatic interface IP Pass List.
2024-04-18T11:16:54.108833+03:00 pfSense.home.arpa snort[59971] Added firewall interface le1 IPv4 address 192.168.45.1 to automatic interface IP Pass List.
2024-04-18T11:16:54.108846+03:00 pfSense.home.arpa snort[59971] Added firewall interface lo0 IPv6 address ::1 to automatic interface IP Pass List.
2024-04-18T11:16:54.108861+03:00 pfSense.home.arpa snort[59971] Added firewall interface lo0 IPv6 address fe80::1 to automatic interface IP Pass List.
2024-04-18T11:16:54.108875+03:00 pfSense.home.arpa snort[59971] Added firewall interface lo0 IPv4 address 127.0.0.1 to automatic interface IP Pass List.
2024-04-18T11:17:01.113931+03:00 pfSense.home.arpa snort[59971] [1:1000002:1] Detected XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:32926 -> 10.20.10.224:80
2024-04-18T14:45:09.003565+03:00 pfSense.home.arpa snort[59971] [1:1000002:1] Detected XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:44844 -> 10.20.10.224:80
2024-04-18T14:45:13.004902+03:00 pfSense.home.arpa snort[59971] [1:1000002:1] Detected XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:44844 -> 10.20.10.224:80
2024-04-18T14:45:14.999866+03:00 pfSense.home.arpa snort[59971] [1:1000002:1] Detected XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.240:44844 -> 10.20.10.224:80
2024-04-18T15:13:27.222326+03:00 pfSense.home.arpa snort[59971] [1:1000002:1] Detected XSS Reflected (PHP_SELF) Attack [Classification: Web Application Attack] [Priority: 1] {TCP} 10.20.10.250:58754 -> 10.20.10.224:80
2024-04-18T15:32:36.419270+03:00 pfSense.home.arpa snort[97021] Initializing 'alert_pf' custom output module for Legacy Mode Blocking.
2024-04-18T15:32:36.419802+03:00 pfSense.home.arpa snort[97021] Populating the internal list of firewall interface IP addresses for auto-whitelisting.
2024-04-18T15:32:36.419998+03:00 pfSense.home.arpa snort[97021] Added firewall interface le0 IPv6 address fe80::a00:27ff:fe30:9340 to automatic interface IP Pass List.
2024-04-18T15:32:36.420149+03:00 pfSense.home.arpa snort[97021] Added firewall interface le0 IPv4 address 10.20.10.224 to automatic interface IP Pass List.
2024-04-18T15:32:36.420260+03:00 pfSense.home.arpa snort[97021] Added firewall interface le1 IPv6 address fe80::a00:27ff:fe62:9b7c to automatic interface IP Pass List.
2024-04-18T15:32:36.420374+03:00 pfSense.home.arpa snort[97021] Added firewall interface le1 IPv4 address 192.168.45.1 to automatic interface IP Pass List.
2024-04-18T15:32:36.420479+03:00 pfSense.home.arpa snort[97021] Added firewall interface lo0 IPv6 address ::1 to automatic interface IP Pass List.
2024-04-18T15:32:36.420616+03:00 pfSense.home.arpa snort[97021] Added firewall interface lo0 IPv6 address fe80::1 to automatic interface IP Pass List.
2024-04-18T15:32:36.420773+03:00 pfSense.home.arpa snort[97021] Added firewall interface lo0 IPv4 address 127.0.0.1 to automatic interface IP Pass List.
2024-04-18T15:32:36.468091+03:00 pfSense.home.arpa snort[7413] Firewall interface IP address change notification monitoring thread started for Legacy Blocking Mode.
2024-04-18T15:35:49.394993+03:00 pfSense.home.arpa snort[7413] *** Caught Term-Signal
2024-04-18T15:35:49.715885+03:00 pfSense.home.arpa snort[7413] Shutting down Legacy Blocking Mode custom output plugin, 'alert_pf'.
